2002 CVE Vulnerabilities
2,393 CVEs published in 2002.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2002-2018 | — | — | 0.3% | Dec 31, 2002 | sastcpd in SAS/Base 8.0 might allow local users to gain privileges by setting the netencralg environment variable, which... |
| CVE-2002-2017 | — | — | 2.5% | Dec 31, 2002 | sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to ref... |
| CVE-2002-2016 | — | — | 1.1% | Dec 31, 2002 | User-mode Linux (UML) 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute arb... |
| CVE-2002-2015 | — | — | 9.5% | Dec 31, 2002 | PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and po... |
| CVE-2002-2014 | — | — | 2.3% | Dec 31, 2002 | Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests... |
| CVE-2002-2270 | — | — | 0.4% | Dec 31, 2002 | Unspecified vulnerability in the ied command in HP-UX 10.10, 10.20, and 11.0 allows local users to view "normally invisi... |
| CVE-2002-2012 | — | — | 6.0% | Dec 31, 2002 | Unknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote attackers to cause "unexpecte... |
| CVE-2002-2011 | — | — | 4.1% | Dec 31, 2002 | Cross-site scripting (XSS) vulnerability in the fom CGI program (fom.cgi) in Faq-O-Matic 2.711 and 2.712 allows remote a... |
| CVE-2002-2010 | — | — | 1.2% | Dec 31, 2002 | Cross-site scripting (XSS) vulnerability in htsearch.cgi in htdig (ht://Dig) 3.1.5, 3.1.6, and 3.2 allows remote attacke... |
| CVE-2002-2363 | — | — | 0.4% | Dec 31, 2002 | VJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges. |
| CVE-2002-2009 | — | — | 7.3% | Dec 31, 2002 | Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by (1) ... |
| CVE-2002-2008 | — | — | 7.1% | Dec 31, 2002 | Apache Tomcat 4.0.3 for Windows allows remote attackers to obtain the web root path via an HTTP request for a resource t... |
| CVE-2002-2007 | — | — | 41.4% | Dec 31, 2002 | The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system informatio... |
| CVE-2002-2006 | — | — | 30.7% | Dec 31, 2002 | The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the in... |
| CVE-2002-2005 | — | — | 1.8% | Dec 31, 2002 | Unknown vulnerability in Java web start 1.0.1_01, 1.0.1, 1.0 and 1.0.1.01 (HP-UX 11.x only) allows attackers to gain acc... |
| CVE-2002-2004 | — | — | 1.2% | Dec 31, 2002 | portmapper in Compaq Tru64 4.0G and 5.0A allows remote attackers to cause a denial of service via a flood of packets. |
| CVE-2002-2003 | — | — | 1.2% | Dec 31, 2002 | ypbind in Compaq Tru64 4.0F, 4.0G, 5.0A, 5.1 and 5.1A allows remote attackers to cause the process to core dump via cert... |
| CVE-2002-2002 | — | — | 2.7% | Dec 31, 2002 | Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long (1) ... |
| CVE-2002-2001 | — | — | 0.3% | Dec 31, 2002 | jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arbi... |
| CVE-2002-2000 | — | — | 0.3% | Dec 31, 2002 | ACMS 4.3 and 4.4 in OpenVMS Alpha 7.2 and 7.3 does not properly use process privileges, which allows attackers to access... |
| CVE-2002-1999 | — | — | 2.7% | Dec 31, 2002 | HP Praesidium Webproxy 1.0 running on HP-UX 11.04 VVOS could allow remote attackers to cause Webproxy to forward request... |
| CVE-2002-2409 | — | — | 0.7% | Dec 31, 2002 | Photon microGUI in QNX Neutrino realtime operating system (RTOS) 6.1.0 and 6.2.0 allows attackers to read user clipboard... |
| CVE-2002-1997 | — | — | 2.8% | Dec 31, 2002 | ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email att... |
| CVE-2002-1996 | — | — | 1.3% | Dec 31, 2002 | Cross-site scripting (XSS) vulnerability in PostNuke 0.71 and earlier allows remote attackers to inject arbitrary web sc... |
| CVE-2002-2078 | — | — | 3.3% | Dec 31, 2002 | Heap-based buffer overflow in Floositek (1) FTGate Pro 1.05 and (2) FTGate Office 1.05 allows remote attackers to cause ... |
Check if your code is affected by 2002 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now